openstack/tempest
Code Issues Proposed changes

Switch Neutron RBAC flag in testing

Browse Source 
Neutron bobcat release has enabled the RBAC new defaults
by default. With the latest release of Neutron have new
defaults enable and devstack (depends on) made NEUTRON_ENFORCE_SCOPE
flag to True by default. Tempst need to switch the flag too so that
we test new RBAC by default and old RBAC in old RBAC job.

Depends-On: https://review.opendev.org/c/openstack/devstack/+/899306
Change-Id: I81c4dc11b16f27d6f074e84ff54363e7b415e5b3
This commit is contained in:
Ghanshyam Mann 2023-10-25 13:13:26 -07:00 committed by Ghanshyam
parent d1742bad94
commit cc0e9b1817
1 changed files with 7 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
zuul.d/integrated-gate.yaml
View File

@ -396,11 +396,6 @@
parent: tempest-full-py3 parent: tempest-full-py3
description: | description: |
This job runs the Tempest tests with scope and new defaults enabled. This job runs the Tempest tests with scope and new defaults enabled.
# TODO: remove this once https://review.opendev.org/c/openstack/neutron-lib/+/864213
# fix is released in neutron-lib
required-projects:
- openstack/neutron-lib
- openstack/neutron
vars: vars:
devstack_localrc: devstack_localrc:
# Enabeling the scope and new defaults for services. # Enabeling the scope and new defaults for services.
@ -410,10 +405,9 @@
# Keystone policies are changed to work for both system as well as # Keystone policies are changed to work for both system as well as
# for project scoped, we need to keep scope check disable for # for project scoped, we need to keep scope check disable for
# keystone. # keystone.
# Nova and Glance have enabled the new defaults and scope by default # Nova, Glance, and Neutron have enabled the new defaults and scope
# in devstack. # by default in devstack.
CINDER_ENFORCE_SCOPE: true CINDER_ENFORCE_SCOPE: true
NEUTRON_ENFORCE_SCOPE: true
PLACEMENT_ENFORCE_SCOPE: true PLACEMENT_ENFORCE_SCOPE: true
- job: - job:
@ -421,12 +415,14 @@
parent: tempest-all parent: tempest-all
description: | description: |
Integration test that runs all tests on RBAC old defaults. Integration test that runs all tests on RBAC old defaults.
vars:
devstack_localrc: devstack_localrc:
# NOTE(gmann): Nova and Glance have enabled the new defaults and scope # NOTE(gmann): Nova, Glance, and Neutron have enabled the new defaults
# by default in devstack so we need some jobs keep testing the old # and scope by default in devstack so we need some jobs keep testing
# defaults until they are removed from service side. # the old defaults until they are removed from service side.
NOVA_ENFORCE_SCOPE: false NOVA_ENFORCE_SCOPE: false
GLANCE_ENFORCE_SCOPE: false GLANCE_ENFORCE_SCOPE: false
NEUTRON_ENFORCE_SCOPE: false
- project-template: - project-template:
name: integrated-gate-networking name: integrated-gate-networking